Behavioral task
behavioral1
Sample
592ec6836728e6f4045650bf918296a0.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
592ec6836728e6f4045650bf918296a0.exe
Resource
win10v2004-20231215-en
General
-
Target
592ec6836728e6f4045650bf918296a0
-
Size
106KB
-
MD5
592ec6836728e6f4045650bf918296a0
-
SHA1
2399441ea3cfbc2870fdeb0037deda8ab5dd6e90
-
SHA256
e0a977670b1125f5f1d8a1304f66122fa4a1f306721586f24e8c5fa8217d173d
-
SHA512
30bc6273dbb829fb7f677e2cb31d17b7163638d5c41747adf79399844a57767c4ccb5b41e909c419ab8631783d18e7562a576801a8ecfb60e4f48aaa526f0c9b
-
SSDEEP
3072:BWgyHBW8E0yioIF4xesdaf6tRihfqJnLx+/453uB6:BWgyHBXyiHCQmaf/hfoLl53y6
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 592ec6836728e6f4045650bf918296a0
Files
-
592ec6836728e6f4045650bf918296a0.exe .ps1 windows:4 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 260KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 92KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE